Sunday, September 20, 2026

Top story

Hacktron's "HEIF Heist" research maps attack paths against services that decode attacker-controlled HEIF, HEIC, or AVIF images with the native libheif and libde265 parsers, demonstrating RCE in Meta's product suite via image upload, authenticated RCE on Discourse and GitHub Enterprise (CVE-2026-19118), and unauthenticated RCE in Next.js via AVIF optimization (research). A companion disclosure chained a libheif out-of-bounds read (CVE-2026-32882) and a Discourse shared-SSO weakness into OpenAI staff ChatGPT and Codex account takeover in under 72 hours — Claude Opus 5 produced the working exploit in about three, and OpenAI paid $6,500 (writeup).

Exploitation & threats

• Orkes Conductor is under active attack: CVE-2026-58138 (CVSS 9.8) is unauthenticated RCE via malicious inline workflow definitions escaping unsandboxed GraalVM evaluators; Fortinet has blocked ~7,000 attempts. Patch to 3.30.2.
• CISA added three actively exploited Linux kernel flaws to KEV — CVE-2025-39682 (kTLS receive path), CVE-2026-53266 (ebtables SNAT out-of-bounds write), CVE-2025-39964 (AF_ALG race) — with a September 21 federal patch deadline under BOD 26-04.
• Sysdig tracks JADEPUFFER, which used Langflow CVE-2025-3248 for initial access and deployed ENCFORGE, a Go ransomware binary built to encrypt AI models, datasets, and vector stores; the first campaign hit 1,342 configuration items.
• RatHat, an AI-driven Android banking trojan, abuses accessibility and ADB to steal bank credentials, PINs, and MFA codes, spread via smishing and fake download pages.

Patch priorities

• SolarWinds ARM 2026.2.1 fixes CVE-2026-28326 (CVSS 8.8, unauthenticated RCE from a hard-coded static key); the same cycle covers Web Help Desk CVE-2026-28323 (9.8, SAML authentication bypass).
• Cisco Secure Email Gateway: CVE-2026-76461 (CVSS 9.8, unauthenticated RCE in email parsing) has three public PoCs and EPSS at 2.0% — prioritize.
• Cisco ISE: CVE-2026-76460 (CVSS 10, unauthenticated API authentication bypass) and CVE-2026-20192.
• vm2 3.12.1 fixes two CVSS 10 sandbox escapes, CVE-2026-93605 and CVE-2026-93603.
• Perl DBI 1.653 fixes CVE-2026-78030 — attacker-controlled DBD::DBM attributes can load arbitrary modules.
• Suricata 8.0.7 ships 67 vulnerability fixes.

Breaches & incidents

• ShinyHunters defaced the Clop ransomware gang's leak site via a claimed unauthenticated Grav CMS upload flaw (CVE-2025-61882), claiming theft of source code, logs, and Clop's onion-service private keys — and is reportedly threatening to extort Clop itself.
• CrowdSec had ~170 private GitHub repositories copied using a former employee's retained-access OAuth token, stolen in the TanStack npm supply chain attack (CVE-2026-45321); the repos, including its blocklist consensus algorithm, later surfaced on a forum.
• National Cancer Centre Singapore exposed identities and contact details of genetic-cancer patients through a misaddressed event invitation.

AI

• Google confirmed Gemini autonomously hacked three real companies during May evaluations run by Irregular: a sandbox misconfiguration granted live internet access and a fictional target name matched a real organization; the model guessed passwords and reused publicly exposed credentials, then stopped itself. Disclosure came only after Wall Street Journal inquiries (details).
• BragJack: a single malicious Chromium extension can hijack AI browser agents — Chrome's Gemini Live, Perplexity Comet, Edge, Opera Neon, Claude in Chrome — earning Gal Weizman $20,000 in bounties.
• Meta launched Muse for Mac (September 17), a free, US-only consumer agent acting across local files, mail, messages, calendar, and notes, with a Sentinel agent gating outbound internet access.
• Qwen3.8-Omni-Flash is a multimodal agent model with 1M-token context, priced at $0.15/$0.47 per million input/output tokens versus Gemini 3.8 Flash.
• AI-assisted discovery is flooding defenders: 66,401 CVEs logged in 2026 so far versus 33,512 at the same point in 2025; Microsoft patched 974 CVEs this month.

Watchlist

• Clop's stolen onion keys: watch for ShinyHunters leveraging the theft against the gang or its victims.
• CrowdSec aftermath: leaked data-science models and consensus code could enable targeted attacks on blocklist customers.
• Unscored CVSS 10s in Azure Logic Apps (CVE-2026-70200), Azure Billing (CVE-2026-62874), and Microsoft Fabric (CVE-2026-69843) lack EPSS and PoC data — recheck before triaging.
• Federal deadline: agencies have until tomorrow, September 21, to patch the three kernel KEV entries.
• A US Special Operations chatbot hallucinated nuclear components on a Chinese ship, nearly triggering a boarding (CNN report).